Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/23b377c9d6180a4196fccd52d97eace53eda82a8.roa
File:                     23b377c9d6180a4196fccd52d97eace53eda82a8.roa (raw, json)
Hash identifier:          QePJnzfVM06f1ggmwR0LHi/+NfOIR7KQYs6B6+wauwY=
Subject key identifier:   D9:B4:DF:7D:8F:E9:3F:2E:90:87:E6:1B:7C:82:4E:02:05:2D:30:AC
Certificate issuer:       /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial:       1CFD6B
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/23b377c9d6180a4196fccd52d97eace53eda82a8.roa
Signing time:             Thu 07 Sep 2023 15:09:38 +0000
ROA not before:           Wed 06 Sep 2023 15:09:38 +0000
ROA not after:            Sun 07 Sep 2025 15:09:38 +0000
asID:                     9009
IP address blocks:        200.107.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899883 (0x1cfd6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
        Validity
            Not Before: Sep  6 15:09:38 2023 GMT
            Not After : Sep  7 15:09:38 2025 GMT
        Subject: CN=23b377c9d6180a4196fccd52d97eace53eda82a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8a:32:14:24:ee:e3:47:2f:e7:d0:49:33:7c:
                    cf:c4:e6:bf:6d:08:8f:ff:56:b2:26:6f:d3:26:ca:
                    0a:8b:99:7a:2a:ec:55:b7:40:a2:cc:a5:b6:4b:44:
                    6b:17:92:e9:5d:e3:9a:5a:29:fe:91:02:f8:41:ed:
                    19:f0:1f:5d:27:88:ec:f3:32:2a:2f:0d:e6:b4:a7:
                    9e:6e:c2:67:2d:80:a1:92:6d:0b:56:eb:9c:cc:69:
                    75:28:2d:76:0a:3d:f9:30:7a:c1:a7:0c:88:72:59:
                    59:fa:a8:dd:0f:e7:de:4e:85:5e:8e:a1:d5:2d:45:
                    56:62:ec:e0:58:a7:b5:28:79:bc:4c:76:7a:5f:65:
                    bc:4b:43:36:28:bb:26:dc:5d:9a:a6:59:9f:b8:07:
                    b1:f5:3c:46:8b:df:e8:cb:7e:6c:f0:00:1e:b2:27:
                    67:2a:29:69:01:93:65:cd:04:8a:85:15:fa:bb:fa:
                    09:a7:42:8b:ec:e4:8e:a0:3a:9c:89:21:17:0d:60:
                    7c:dd:62:cd:54:d2:6d:05:b0:e7:ec:16:6b:c0:f8:
                    21:14:bb:9f:17:6a:74:15:6b:ff:bd:2d:d2:65:3b:
                    c5:ac:7e:04:0c:89:d6:65:48:b8:bb:1a:20:17:2f:
                    07:07:f2:b5:ad:66:d3:e2:5a:fd:11:ef:c2:5c:82:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B4:DF:7D:8F:E9:3F:2E:90:87:E6:1B:7C:82:4E:02:05:2D:30:AC
            X509v3 Authority Key Identifier:
                keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/23b377c9d6180a4196fccd52d97eace53eda82a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:42:fc:d0:5d:a5:c9:ae:19:37:f6:c0:88:9a:7e:29:13:
         e9:57:f8:d9:13:b6:cc:ef:b6:10:ca:a6:61:74:8a:c9:83:39:
         51:d1:d1:28:7a:6d:dc:29:ee:45:b1:be:11:26:57:d8:e4:1f:
         83:78:4e:e0:2c:3d:2e:ea:90:13:c9:64:ae:84:b0:d1:35:9d:
         ee:a8:3c:75:fe:ee:33:b5:99:85:83:74:25:c8:af:84:24:b5:
         9a:1a:8a:0c:3d:a7:90:b5:c6:63:c1:b1:4c:29:d1:11:a1:57:
         1d:d2:79:a0:46:24:77:5f:3c:88:ba:bd:cd:ec:e4:ba:15:6d:
         19:aa:8f:9c:01:b8:24:ac:82:ce:e2:59:95:e2:51:35:fe:96:
         9d:ab:95:d1:57:c2:85:9a:2e:21:31:c8:dc:f7:03:92:6d:80:
         c0:cf:40:a1:68:1f:aa:a8:5b:0c:18:e4:c4:2b:1d:b4:4a:a9:
         0c:ea:09:66:3c:2f:40:61:46:36:7e:8e:fc:db:5e:43:ff:6f:
         c3:31:83:b7:ae:4d:54:3b:44:f0:64:6d:20:3b:44:fa:fa:05:
         84:c2:58:43:b3:ea:a9:d1:c8:64:33:98:00:be:2d:eb:46:ac:
         ff:90:67:6d:3e:02:0e:a6:b1:5e:2d:6d:15:4c:d8:92:01:f0:
         db:9a:41:63
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHP1rMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
ODJjM2FkOWU1MDEwZmFlODk1NmYwNjFmMDU0ZmU2MTI1YzIzNWMwHhcNMjMwOTA2
MTUwOTM4WhcNMjUwOTA3MTUwOTM4WjAzMTEwLwYDVQQDEygyM2IzNzdjOWQ2MTgw
YTQxOTZmY2NkNTJkOTdlYWNlNTNlZGE4MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3YoyFCTu40cv59BJM3zPxOa/bQiP/1ayJm/TJsoKi5l6KuxV
t0CizKW2S0RrF5LpXeOaWin+kQL4Qe0Z8B9dJ4js8zIqLw3mtKeebsJnLYChkm0L
VuuczGl1KC12Cj35MHrBpwyIcllZ+qjdD+feToVejqHVLUVWYuzgWKe1KHm8THZ6
X2W8S0M2KLsm3F2aplmfuAex9TxGi9/oy35s8AAesidnKilpAZNlzQSKhRX6u/oJ
p0KL7OSOoDqciSEXDWB83WLNVNJtBbDn7BZrwPghFLufF2p0FWv/vS3SZTvFrH4E
DInWZUi4uxogFy8HB/K1rWbT4lr9Ee/CXILwcQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNm0332P6T8ukIfmG3yCTgIFLTCsMB8GA1UdIwQYMBaAFCtFN2ZfnchX4LXg
NWmy6HNlvb7GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2Y4MmMz
YWQ5ZTUwMTBmYWU4OTU2ZjA2MWYwNTRmZTYxMjVjMjM1Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2U4ZGQwMzYtOTcxMi00MzEzLThhMjYtY2NjNTZm
N2NjMDJlLzIzYjM3N2M5ZDYxODBhNDE5NmZjY2Q1MmQ5N2VhY2U1M2VkYTgyYTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZThkZDAzNi05NzEyLTQzMTMtOGEyNi1jY2M1
NmY3Y2MwMmUvM2Y4MmMzYWQ5ZTUwMTBmYWU4OTU2ZjA2MWYwNTRmZTYxMjVjMjM1
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhrzTANBgkqhkiG9w0BAQsFAAOCAQEAAwtC/NBdpcmuGTf2
wIiafikT6Vf42RO2zO+2EMqmYXSKyYM5UdHRKHpt3CnuRbG+ESZX2OQfg3hO4Cw9
LuqQE8lkroSw0TWd7qg8df7uM7WZhYN0JcivhCS1mhqKDD2nkLXGY8GxTCnREaFX
HdJ5oEYkd188iLq9zezkuhVtGaqPnAG4JKyCzuJZleJRNf6WnauV0VfChZouITHI
3PcDkm2AwM9AoWgfqqhbDBjkxCsdtEqpDOoJZjwvQGFGNn6O/NteQ/9vwzGDt65N
VDtE8GRtIDtE+voFhMJYQ7PqqdHIZDOYAL4t60as/5BnbT4CDqaxXi1tFUzYkgHw
25pBYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org